{"name":"io.github.suomimasuda/rightos-mcp","slug":"suomimasuda-rightos-mcp","title":null,"description":"RightOS MCP: privacy-first QR queue/EV/pickup. 18 tools, no end-user PII.","url":"https://mcp.market/server/suomimasuda-rightos-mcp","rating":null,"grade":"B","score":83,"certified":false,"status":"active","category":"other","tags":[],"presence":{"score":26,"stars":0,"forks":0,"downloads_week":49,"last_push_at":"2026-09-06T02:18:36.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/suomimasuda/rightos-sdk","website":"https://rightos.i-s3.com/software/rightos/docs/mcp","version":"0.5.0","remotes":[],"packages":[{"registryType":"npm","registryBaseUrl":"https://registry.npmjs.org","identifier":"@i-s3/rightos-mcp","version":"0.5.0","runtimeHint":"npx","transport":{"type":"stdio"},"environmentVariables":[{"description":"Operator API key (optional; demo: rk_demo_00000000000000000000)","isSecret":true,"name":"RIGHTOS_API_KEY"},{"description":"Override API base URL (default: production)","name":"RIGHTOS_BASE_URL"}]}],"tools":[{"name":"cancel_token","description":"Cancel a Right Token (own organization only).","write_action":true,"price_micros":0,"input_schema":null},{"name":"create_location","description":"Create a location (shop, clinic, ev_charging, event, logistics, pickup, other). Returns 402 if the plan's location limit is exceeded.","write_action":true,"price_micros":0,"input_schema":null},{"name":"create_webhook","description":"Register an outbound webhook (up to 3 per organization, https only). Events: token.verified / token.used / token.cancelled / token.transferred / queue.approaching (defaults to all; queue.approaching fires only when the location policy sets approachingThreshold). The response includes the signing secret (whsec_...) EXACTLY ONCE — deliveries are signed via the x-rightos-signature header (t=<unix sec","write_action":true,"price_micros":0,"input_schema":null},{"name":"delete_webhook","description":"Delete an outbound webhook (own organization only).","write_action":true,"price_micros":0,"input_schema":null},{"name":"export_data","description":"Export all organization data (locations, tokens, verification logs, policy change history) as JSON. Contains no secret values.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_location_policy","description":"Get a location's effective policy (transferability, max transfers, default validity, holder self-cancellation). Resolution: industry preset -> country overlay -> location override. Public for transparency.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_location_queue","description":"Public queue snapshot for a location (counts only, no PII). Optional tokenId adds aheadCount and queuePosition. Does not auto-call or assign staff (ADR-0024).","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_policy_history","description":"Policy change audit log for a location (before/after overrides, newest first). Append-only.","write_action":false,"price_micros":0,"input_schema":null},{"name":"get_token","description":"Get a Right Token (digital QR ticket) by its tokenId. Never returns the secret verification code.","write_action":false,"price_micros":0,"input_schema":null},{"name":"holder_cancel_token","description":"Self-cancel a Right Token as its current holder (proven by the verification code). May be rejected by the location's policy (policy_cancel_disabled). Irreversible. Rate limited like verify.","write_action":true,"price_micros":0,"input_schema":null},{"name":"issue_token","description":"Issue a Right Token (digital QR ticket). The verification code and wallet URL are returned EXACTLY ONCE — hand the walletUrl to the end user. Returns 402 if the plan's monthly limit is exceeded. Returns 409 queue_full when maxActiveTokens is reached.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_locations","description":"List your organization's locations.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_plans","description":"List RightOS pricing plans (globally uniform pricing, free tier available).","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_policies","description":"List the full policy knowledge base: industry presets per location type and country overlays (JP, US, GB, KR, TW, FR, DE, IT, ES, AU — informed by local ticket-resale laws). Useful when choosing a location type or proposing policy overrides. Defaults, not legal advice. Public.","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_tokens","description":"List your organization's Right Tokens. Filter by locationId, status, and since (ISO 8601).","write_action":false,"price_micros":0,"input_schema":null},{"name":"list_webhooks","description":"List the organization's outbound webhooks (never includes signing secrets).","write_action":false,"price_micros":0,"input_schema":null},{"name":"set_location_policy","description":"Override a location's policy (partial update: transferable, maxTransfers, defaultValidityMinutes, verificationRequirement, holderCancellable, maxActiveTokens, enforceTimeWindow, requireVerifyBeforeUse, approachingThreshold). Set reset=true to restore the industry preset.","write_action":false,"price_micros":0,"input_schema":null},{"name":"transfer_token","description":"Transfer a Right Token to a new holder (re-keying: a new verification code is issued and the old one is invalidated immediately). Only the current holder can transfer. May be rejected by the location's policy (policy_transfer_disabled / transfer_limit_reached).","write_action":true,"price_micros":0,"input_schema":null},{"name":"use_token","description":"Mark a Right Token as used after service (own organization only). Returns 409 verify_required when requireVerifyBeforeUse policy is enabled and the token is not yet verified.","write_action":false,"price_micros":0,"input_schema":null},{"name":"verify_token","description":"Verify a Right Token with its verification code. Result is success / failed / expired / cancelled / already_used / not_yet_valid (when enforceTimeWindow blocks verify before startTime). Rate limited (10/min per token).","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":83,"grade":"B","scanned_at":"2026-09-20T11:39:43.795Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-20T11:39:43.730Z","components":{"code":{"score":25,"max":25,"notes":["2 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":6,"max":15,"notes":["static API keys via environment variables"]},"maintenance":{"score":15,"max":15,"notes":["last push 14 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[],"inputs":{"packages":[{"registryType":"npm","identifier":"@i-s3/rightos-mcp","version":"0.5.0","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":3,"publishedAt":"2026-09-04T23:48:08.283Z","repositoryUrl":"git+https://github.com/suomimasuda/rightos-sdk.git","weeklyDownloads":49}],"repo":{"found":true,"owner":"suomimasuda","repo":"rightos-sdk","archived":false,"pushedAt":"2026-09-06T02:18:36Z","stars":0,"forks":0,"openIssues":0,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/749851?v=4","ownerCreatedAt":"2011-04-25T07:21:19Z","license":"MIT"},"icon":{"url":null,"source":"none"},"presence":{"stars":0,"forks":0,"downloadsWeek":49,"license":"MIT","lastPushAt":"2026-09-06T02:18:36.000Z","score":26}}}},"grade_history":[],"reviews":[]}